Application 5

[Monica]

It is highly suggested that you complete Basic missions before attempting Application missions.

If you need help with this mission, make sure you have a legitimate question. Questions like, "How can I find the password?" or "Where do I find the string?" is UNacceptable. Why? Because a.) You're stupid. b.) You obviously want to be spoonfed BECAUSE you're stupid or c.) You want to complete the mission for points because you think you can redeem them for a cheeseburger at McDonalds. I'll tell you what - below is a list of what you may need to know to complete many Application missions. Please note, not all are necessary to complete this particular mission.

In the end, we hope you do learn. That is the point of being here on HTS.

Knowledge May Be Required:
- Code Analysis/Hex-Editing
- ASM Knowledge
- Compiled Languages (i.e. C/C++, VB)
- Interpreted Languages (i.e. PHP, Perl)

Useful Tools:
- Ollydbg
- Decompiler

** P.S. Posting answers and/or spoilers (i.e. mission links, mission file names/gages, scripts/code) will DEFINITELY result in multiple warnings/bans.

The End.

[newie]

you have bug in basic mission 5, you solved it in the same way of mission 4 and I don't believe that that was your point.

Moreover I have not looked at all in the Java script code and still it showed me the code.

I am sure I solved it in the "wrong" way and I have not learned what I was supposed to learn.

[Avery17]

you have bug in basic mission 5, you solved it in the same way of mission 4 and I don't believe that that was your point.

Moreover I have not looked at all in the Java script code and still it showed me the code.

I am sure I solved it in the "wrong" way and I have not learned what I was supposed to learn.

Your posting in the wrong thread.

However, good catch. You are correct my good sir. The sources are exactly the same.

[Defience]

you have bug in basic mission 5, you solved it in the same way of mission 4 and I don't believe that that was your point.

Moreover I have not looked at all in the Java script code and still it showed me the code.

I am sure I solved it in the "wrong" way and I have not learned what I was supposed to learn.

This thread is for Application 5.

[SonicD007]

I had been trying to complete this mission for at least a week before I had given up to try and learn some more. I just bought "Hacking the art of exploitation" and so far I've learned a nice amount as far as memory goes (well more than what I used to know). I'm now attempting this mission again and I think I might have found the password, or at least some information that has to do with the password, and would like to pm someone about my findings to get further insight on if I'm on the right track and maybe a push in the right direction if I'm not on the right track. Thanks.

EDIT: yea I was on the right track. Finally figured this one out.

[dopamine10]

Hmmmm....

I can get the application to state: The password is X

But X is what I myself typed in as the password....time to learn about memory addresses I guess????

[limdis]

Still working on this one. I popped my olly cherry with the last challenge and enjoyed it so I decided to keep going. So far I have been able to:
- Prevent the program from closing and reloop
- jump over "invalid password" and have "The password is (what i put)"
- have "invalid passwordinvalid passwordinvalid passwordinvalid passwordinvalid password" show
- and NOP out single and multiple things in attempt to skip over the incorrect entry to force an answer showing, with no luck

Do we need to trick the incorrect submission (sorta like app4) or skip over the user entry entirely forcing a full showing on startup?

[DarkhX0r]

Hmmmm....

I can get the application to state: The password is X

But X is what I myself typed in as the password....time to learn about memory addresses I guess????

No, you are going about it the wrong way. Think carefully. If you modify the JMP that will NOT work.

[dopamine10]

I am so new to assembly, I will be coming back to this again soon though

Thanks for the tip.

[fabioboh10]

I tried to use a decompiler in c program. But I had no success. I wonder if it's really nescessário decompile the program. thx